HashPump is a C++ based command line tool to exploit the Hash Length Extension Attack with various hash types supported, including MD4, MD5, SHA1, SHA256, and SHA512. There’s a good write-up of how to use this in practical terms here: Plaid CTF 2014: mtpox Usage [crayon-5edcb0f92b1a8865352177/] You can download HashPump here: [crayon-5edcb0f92b1b1373386870/] Or read more … Continue reading HashPump – Exploit Hash Length Extension Attack